Problems logging in to websites

[sorcerer]

Hi, I wonder if you can help me. I’m having problems looging in to 2 sites:

Steam. I was unable to log in to my account because the password was ‘incorrect’ which it wasn’t. They sent a code to a non-existant email address, after that they asked for my card details so they could try a trial bank transaction, so of course I didn’t do that. I opened another account and was asked twice to change passwords, and I was going through the account recovery process when the second problem occurred.

Orange.fr email. Same kind of thing, password ‘incorrect’ and now locked out of that until they send me a new password through the post. There’s definately something wrong because they do a picture identification routine which was rigged to fail.

Any ideas?
Thanks

[Rustys]

Have you used the browser and gone to the Steam web site and changed it through there under support.

As far as you email is concerned call them directly sound like you are being scammed on both accounts.

[sorcerer]

Yeah, I was doing that with Steam but they wanted to send an email…
I’m going to call Orange tomorrow.

[Rustys]

If you think there is a chance of the system being infected then follow the instruction form here

https://pchelpforum.net/t/read-before-following-prework-instructions.11236/

https://pchelpforum.net/t/prework-please-read-before-posting.11235/

Post the information and we will more the thread here.

https://pchelpforum.net/f/malware-removal.53/

[sorcerer]

Thanks for those links, I’ll work my way through them.

Just to bring you up to date, I’ve run Avast, Ccleaner and Malwarebytes, and they’ve all come back negative. Everything else is running normally.

[sorcerer]

[HEADING=1]Hi, here are the two files you saked for. Note that Avast asked me to block some entries your software wanted to make, I allowed some but blocked others since your instructions didn’t say what to do. Please advise whether you want me to run it again and either allow all or block all.
FireFox:[/HEADING]
FF HKLM...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-02-05]
FF HKLM...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => not found
FF HKLM-x32...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF HKLM-x32...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2020-02-04] [Legacy] [not signed]
FF Plugin: @mcafee.com/MSC,version=10 → C:\Program Files\McAfee\MSC\npMcSnFFPl64.dll [2019-12-03] (McAfee, LLC. → )
FF Plugin-x32: @mcafee.com/MSC,version=10 → C:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll [2019-12-03] (McAfee, LLC. → )
[HEADING=1]Chrome:[/HEADING]
CHR Profile: C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default [2020-02-02]
CHR StartupUrls: Default → “hxxp://www.google.com”
CHR Extension: (Slides) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhon fmgoek [2019-05-11]
CHR Extension: (Docs) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfi lokake [2019-05-11]
CHR Extension: (YouTube) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldk acnbeo [2019-05-11]
CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihc jkigck [2019-12-24]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepao oicaho [2019-12-11]
CHR Extension: (Chrome Web Store Payments) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccm gmieda [2019-12-11]
CHR Extension: (Chrome Media Router) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcj beemfm [2019-12-24]
CHR HKLM...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
[HEADING=1]Opera:[/HEADING]
OPR Notifications: hxxps://pchelpforum.net

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESMService; C:\WINDOWS\System32\DriverStore\FileRepository\sgx _psw.inf_amd64_fd0b4b97d35097fa\aesm_service.exe [716824 2019-09-22] (Intel(R) Software Development Products → Intel Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-19] (AVAST Software s.r.o. → AVAST Software)
R2 AtherosSvc; C:\WINDOWS\System32\drivers\AdminService.exe [386976 2019-08-08] (Microsoft Windows Hardware Compatibility Publisher → Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [417536 2020-02-14] (AVAST Software s.r.o. → AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [38096 2020-01-24] (Dell Inc → )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRe medationService.exe [293528 2018-10-20] (Dell Inc → Dell Inc.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [36032 2019-11-08] (Dell Inc → )
S4 HfcDisableService; C:\WINDOWS\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\HfcDisableService .exe [1881672 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
S3 iaStorAfsService; C:\WINDOWS\System32\iaStorAfsService.exe [2859592 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [742704 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [668472 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [213648 2017-11-09] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\K illerNetworkService.exe [2484408 2018-07-30] (Rivet Networks LLC → Rivet Networks)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2020-02-16] (Malwarebytes Inc → Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [915832 2020-02-05] (McAfee, LLC → McAfee, Inc.)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_19_9\McApExe.exe [748040 2019-11-20] (McAfee, LLC. → McAfee, LLC)
S3 McAWFwk; c:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe [455584 2018-07-16] (McAfee, Inc. → McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\3.3.122.0\McCSPServiceHost.exe [2685776 2019-10-31] (McAfee, LLC. → McAfee, LLC.)
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [638536 2019-11-08] (McAfee, Inc. → McAfee, LLC)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [638536 2019-11-08] (McAfee, Inc. → McAfee, LLC)
R3 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [638536 2019-11-08] (McAfee, Inc. → McAfee, LLC)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1731616 2019-11-14] (McAfee, LLC → McAfee, LLC.)
S3 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe [1366672 2019-11-19] (McAfee, LLC. → McAfee, LLC.)
R2 RstMwService; C:\WINDOWS\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\RstMwService.exe [2156616 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324584 2017-09-07] (Realtek Semiconductor Corp. → Realtek Semiconductor)
R2 WavesSysSvc; C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [829816 2017-08-30] (Waves Inc → Waves Audio Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation → Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation → Microsoft Corporation)
S2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\x TendSoftAPService.exe [72888 2018-07-30] (Rivet Networks LLC → CloudBees, Inc.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\x TendUtilityService.exe [72888 2018-07-30] (Rivet Networks LLC → CloudBees, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\N VDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\p lugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
R2 NvTelemetryContainer; “C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe” -s NvTelemetryContainer -f “C:\ProgramData\NVIDIA\NvTelemetryContainer.log” -l 3 -d “C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins” -r

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [204824 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [274456 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [209552 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [65120 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher → AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42736 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [161544 2019-11-02] (AVAST Software s.r.o. → AVAST Software)
R1 aswNetSec; C:\WINDOWS\System32\drivers\aswNetSec.sys [552848 2020-02-14] (AVAST Software s.r.o. → AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110320 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83792 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848432 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460448 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316528 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [75912 2019-11-19] (McAfee, Inc. → McAfee, LLC)
R4 DBUtil_2_3; C:\WINDOWS\TEMP\DBUtil_2_3.Sys [14840 2020-02-14] (Dell Inc. → )
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [36728 2019-05-21] (Microsoft Windows Hardware Compatibility Publisher → Dell Inc.)
R3 e2xw10x64; C:\WINDOWS\System32\drivers\e2xw10x64.sys [164816 2018-11-26] (Rivet Networks LLC → Qualcomm Atheros, Inc.)
R3 HfAudio; C:\WINDOWS\System32\drivers\HfAudio.sys [91200 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [217912 2019-06-04] (McAfee, LLC → McAfee, Inc.)
S3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [98968 2017-10-16] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R0 iaStorAC; C:\WINDOWS\System32\drivers\iaStorAC.sys [1033288 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [72776 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\K feCo10X64.sys [144592 2018-07-30] (Rivet Networks LLC → Rivet Networks, LLC.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-02-16] (Malwarebytes Inc → Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-02-16] (Microsoft Windows Early Launch Anti-malware Publisher → Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-02-16] (Malwarebytes Inc → Malwarebytes)
R3 MEIx64; C:\WINDOWS\System32\DriverStore\FileRepository\hec i.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sy s [266128 2019-04-17] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [522368 2019-11-19] (McAfee, Inc. → McAfee, LLC)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [380544 2019-11-19] (McAfee, Inc. → McAfee, LLC)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85928 2019-11-19] (Microsoft Windows Early Launch Anti-malware Publisher → McAfee, LLC)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [517256 2019-11-19] (McAfee, Inc. → McAfee, LLC)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [996488 2019-11-19] (McAfee, Inc. → McAfee, LLC)
R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [564144 2019-09-16] (McAfee, Inc. → McAfee LLC.)
S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [107952 2019-09-16] (McAfee, Inc. → McAfee LLC.)
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [116872 2019-11-19] (McAfee, Inc. → McAfee, LLC)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [252552 2019-11-19] (McAfee, Inc. → McAfee, LLC)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\nvlddmkm.sys [22739392 2019-12-11] (NVIDIA Corporation → NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [67432 2018-03-15] (NVIDIA Corporation → NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [68112 2018-04-28] (NVIDIA Corporation → NVIDIA Corporation)
R3 ScrHIDDriver2; C:\WINDOWS\System32\drivers\ScrHIDDriver2.sys [75800 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher → Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows → Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows → Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-17 10:22 - 2020-02-17 10:22 - 000014515 _____ C:\Users\johnb\Desktop\FRST.txt
2020-02-17 10:20 - 2020-02-17 10:22 - 000000000 ____D C:\FRST
2020-02-17 10:19 - 2020-02-17 10:19 - 002279424 _____ (Farbar) C:\Users\johnb\Desktop\FRST64.exe
2020-02-16 20:12 - 2020-02-16 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2020-02-16 18:14 - 2020-02-16 18:14 - 000118422 _____ C:\Users\johnb\Documents\cc_20200216_181438.reg
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\mbamtray
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\mbam
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\cache
2020-02-16 18:05 - 2020-02-16 18:05 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-02-16 18:05 - 2020-02-16 18:05 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-02-16 18:04 - 2020-02-16 18:04 - 001924728 _____ (Malwarebytes) C:\Users\johnb\Downloads\MBSetup.exe
2020-02-16 18:04 - 2020-02-16 18:04 - 000000000 ____D C:\Program Files\Malwarebytes
2020-02-15 13:05 - 2020-02-15 13:05 - 000000000 ____D C:\Users\johnb\AppData\Roaming\GameSparks
2020-02-15 10:17 - 2020-02-15 10:17 - 000000222 _____ C:\Users\johnb\Desktop\Wolcen Lords of Mayhem.url
2020-02-14 17:32 - 2020-02-16 18:16 - 000000000 ____D C:\Program Files (x86)\Steam
2020-02-14 17:32 - 2020-02-14 17:32 - 001669632 _____ C:\Users\johnb\Downloads\SteamInstall.msi
2020-02-14 17:32 - 2020-02-14 17:32 - 000000988 _____ C:\Users\Public\Desktop\Steam.lnk
2020-02-14 17:32 - 2020-02-14 17:32 - 000000988 _____ C:\ProgramData\Desktop\Steam.lnk
2020-02-14 17:32 - 2020-02-14 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-02-14 10:59 - 2020-02-14 10:59 - 000552848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys
2020-02-14 10:59 - 2020-02-14 10:59 - 000002090 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2020-02-14 10:59 - 2019-10-03 14:21 - 000355720 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-02-13 04:06 - 2020-02-13 04:06 - 000000000 ____D C:\ProgramData\ssh
2020-02-13 04:06 - 2020-02-13 04:06 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-02-13 02:20 - 2020-02-13 02:20 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayR eady.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayR eady.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-02-13 02:20 - 2020-02-13 02:20 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-02-13 02:20 - 2020-02-13 02:20 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.oneco re.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.deskt op.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense. dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows. dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-02-13 02:20 - 2020-02-13 02:20 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-02-13 02:20 - 2020-02-13 02:20 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Conve rsationalAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-02-13 02:20 - 2020-02-13 02:20 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.d ll
2020-02-13 02:20 - 2020-02-13 02:20 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.d ll
2020-02-13 02:20 - 2020-02-13 02:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAcc ess.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionA lias.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApp s.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dl l
2020-02-13 02:20 - 2020-02-13 02:20 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-02-13 02:20 - 2020-02-13 02:20 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dl l
2020-02-13 02:20 - 2020-02-13 02:20 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-02-13 02:16 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-13 02:16 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-10 17:20 - 2020-02-10 17:20 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_ 11_00.Wdf
2020-02-10 17:20 - 2020-02-10 17:20 - 000000000 ____D C:\Users\johnb\AppData\Roaming\CANON INC
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\Users\johnb\AppData\Roaming\canon
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\ProgramData\Canon_Inc_IC
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\Program Files (x86)\Canon
2020-02-07 14:21 - 2020-02-07 14:22 - 040044345 _____ C:\Users\johnb\Downloads\cdw-inst-8-10-4a-24-r2-u01-9l.zip
2020-02-01 13:32 - 2020-02-01 13:32 - 000000000 ____D C:\Users\johnb\AppData\Local\NVIDIA
2020-01-29 12:00 - 2020-01-29 12:00 - 005192280 _____ (Husdawg, LLC) C:\Users\johnb\Downloads\Detection.exe
2020-01-27 14:19 - 2020-01-27 14:19 - 000000000 ____D C:\Program Files (x86)\DummyDir
2020-01-22 23:01 - 2020-01-23 11:52 - 1468520317 _____ C:\Users\johnb\Downloads\Brecha-2009.rar
2020-01-22 02:20 - 2019-12-11 02:19 - 001073864 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 001073864 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000931528 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000931528 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000848584 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000848584 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000706248 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000706248 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000450392 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000352512 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-01-22 02:20 - 2019-12-11 02:18 - 011839856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2020-01-22 02:20 - 2019-12-11 02:18 - 010164936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 002074504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001568688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001483640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001370032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001144064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001065392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001000792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000824712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000812800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000686592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000677072 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000658680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000573360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-01-22 02:20 - 2019-12-11 02:17 - 000558080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000545112 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000055632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 040510848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 035379448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 017461248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 015028568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 005380296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 004716376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 000857856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-01-22 02:20 - 2019-12-11 02:16 - 000453120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-01-22 02:20 - 2019-12-11 02:15 - 004205776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-01-22 02:20 - 2019-12-11 01:59 - 000075819 _____ C:\WINDOWS\system32\nvinfo.pb

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-17 09:40 - 2019-12-23 02:54 - 000000000 D C:\WINDOWS\system32\SleepStudy
2020-02-16 21:37 - 2019-12-23 02:59 - 000003512 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1557493179
2020-02-16 21:37 - 2019-12-23 02:59 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineU A
2020-02-16 21:37 - 2019-12-23 02:59 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLog on{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000003180 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2020-02-16 21:37 - 2019-12-23 02:59 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineC ore
2020-02-16 21:37 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR3{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-02-16 21:37 - 2019-12-23 02:59 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B 2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1677839296-4017878107-255514410-1001
2020-02-16 21:37 - 2019-12-23 02:59 - 000002852 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1677839296-4017878107-255514410-500
2020-02-16 21:37 - 2019-12-23 02:59 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_ {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-16 21:37 - 2019-12-23 02:59 - 000002660 _____ C:\WINDOWS\system32\Tasks\McAfeeLogon
2020-02-16 21:37 - 2019-12-23 02:59 - 000002646 _____ C:\WINDOWS\system32\Tasks\McAfee Remediation (Prepare)
2020-02-16 21:37 - 2019-12-23 02:59 - 000002236 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-02-16 21:20 - 2019-12-23 02:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-02-16 21:20 - 2019-05-10 17:01 - 000000000 ____D C:\Users\johnb\AppData\Local\Battle.net
2020-02-16 18:05 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-02-16 17:39 - 2019-10-15 09:55 - 000000000 ____D C:\Program Files (x86)\Diablo III Public Test
2020-02-16 16:07 - 2019-12-23 02:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2020-02-16 13:48 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-16 12:25 - 2019-03-27 05:24 - 000000000 ____D C:\ProgramData\NVIDIA
2020-02-16 12:10 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2020-02-16 11:39 - 2019-03-27 05:24 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2020-02-16 11:31 - 2019-05-10 17:04 - 000000000 ____D C:\Program Files (x86)\Diablo III
2020-02-16 05:29 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-16 05:29 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-02-15 10:17 - 2019-05-10 14:54 - 000000000 ____D C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Steam
2020-02-15 04:13 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-15 04:13 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-14 17:32 - 2019-12-23 02:55 - 000000000 ____D C:\Users\johnb
2020-02-14 11:29 - 2019-12-23 03:01 - 000797848 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-02-14 11:24 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Registration
2020-02-14 11:22 - 2019-12-23 02:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-02-14 11:22 - 2019-05-10 13:48 - 000000000 __SHD C:\Users\johnb\IntelGraphicsProfiles
2020-02-14 11:21 - 2019-10-21 08:26 - 000044604 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_ backup1
2020-02-14 11:21 - 2019-10-21 08:26 - 000031754 _____ C:\ProgramData\DisplaySessionContainer1.log_backup 1
2020-02-14 11:21 - 2019-10-21 08:26 - 000024798 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_back up1
2020-02-14 11:21 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-02-14 10:59 - 2019-12-23 02:59 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-02-13 04:07 - 2020-01-15 02:25 - 000001205 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-02-13 04:07 - 2019-12-23 02:54 - 000438640 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-02-13 04:07 - 2019-05-10 13:48 - 000000000 ___RD C:\Users\johnb\3D Objects
2020-02-13 04:07 - 2019-03-27 05:27 - 000000000 ____D C:\Program Files (x86)\McAfee
2020-02-13 04:07 - 2019-03-17 08:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-02-13 04:06 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\servicing
2020-02-13 02:23 - 2019-05-10 16:44 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 02:22 - 2019-05-10 16:44 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-12 18:24 - 2019-03-19 05:37 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2020-02-08 19:34 - 2019-12-23 02:55 - 000002365 _____ C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\OneDrive.lnk
2020-02-08 19:34 - 2019-05-10 13:49 - 000000000 ___RD C:\Users\johnb\OneDrive
2020-02-07 22:28 - 2019-05-10 16:59 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-02-07 09:57 - 2019-05-10 13:59 - 000001401 _____ C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Opera Browser.lnk
2020-02-04 20:57 - 2019-05-10 18:27 - 000000000 ____D C:\Users\johnb\Documents\Diablo III
2020-02-04 11:17 - 2019-03-27 05:27 - 000000000 ____D C:\Program Files\Common Files\mcafee
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-02 19:00 - 2019-06-02 12:59 - 000000000 ____D C:\Users\johnb\AppData\Local\D3DSCache
2020-02-01 15:41 - 2020-01-08 13:12 - 000030649 _____ C:\Users\johnb\Documents\cash20.ods
2020-01-26 11:55 - 2019-06-07 17:01 - 000022590 _____ C:\Users\johnb\Documents\newfamily.ods
2020-01-21 21:51 - 2019-05-11 09:56 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)
[HEADING=1]Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-02-2020
Ran by johnb (17-02-2020 10:23:27)
Running from C:\Users\johnb\Desktop
Windows 10 Home Version 1909 18363.657 (X64) (2019-12-23 02:00:01)
Boot Mode: Normal[/HEADING]
==================== Accounts: =============================

Administrator (S-1-5-21-1677839296-4017878107-255514410-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1677839296-4017878107-255514410-503 - Limited - Disabled)
Guest (S-1-5-21-1677839296-4017878107-255514410-501 - Limited - Disabled)
johnb (S-1-5-21-1677839296-4017878107-255514410-1001 - Administrator - Enabled) => C:\Users\johnb
WDAGUtilityAccount (S-1-5-21-1677839296-4017878107-255514410-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {F682A51C-4EAD-6A3A-F460-B9C1D4A2DB09}
AS: McAfee VirusScan (Enabled - Up to date) {4DE344F8-6897-65B4-CED0-82B3AF2591B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
FW: McAfee Firewall (Enabled) {CEB92439-04C2-6B62-DF3F-10F42A719C72}

==================== Installed Programs ======================

(Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Premium Security (HKLM-x32...\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Battle.net (HKLM-x32...\Battle.net) (Version: - Blizzard Entertainment)
Canon Utilities CameraWindow DC 8 (HKLM-x32...\CameraWindowDC) (Version: 8.10.4.24 - Canon Inc.)
CCleaner (HKLM...\CCleaner) (Version: 5.62 - Piriform)
Dell Digital Delivery Services (HKLM-x32...{2F67D318-DCDC-4D94-9048-37789F3C065B}) (Version: 4.0.51.0 - Dell Inc.)
Dell Mobile Connect Drivers (HKLM...{04DF02C6-E3D7-4D26-A44C-6F8A2E218D2C}) (Version: 1.3.6844 - Screenovate Technologies Ltd.)
Dell SupportAssist Remediation (HKLM...{03C35F56-A9AD-4B59-B061-B8CE41C4C22B}) (Version: 4.1.0.6830 - Dell Inc.) Hidden
Dell SupportAssist Remediation (HKLM-x32...{f4ee83d8-d901-4c1a-b5a2-288427598fe2}) (Version: 4.1.0.6830 - Dell Inc.)
Dell Update - SupportAssist Update Plugin (HKLM...{9BEF4D9A-592C-4073-B202-30234347B3DA}) (Version: 4.1.0.6830 - Dell Inc.) Hidden
Dell Update - SupportAssist Update Plugin (HKLM-x32...{286db51f-336c-4d5e-b1e2-3fbc3becd693}) (Version: 4.1.0.6830 - Dell Inc.)
Dell Update for Windows 10 (HKLM...{70E9F8CC-A23E-4C25-B292-C86C1821587C}) (Version: 3.1.0 - Dell, Inc.)
Diablo III (HKLM-x32...\Diablo III) (Version: - Blizzard Entertainment)
Diablo III Public Test (HKLM-x32...\Diablo III Public Test) (Version: - Blizzard Entertainment)
Google Chrome (HKLM-x32...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Honeyview (HKLM...\Honeyview) (Version: 5.31 - Bandisoft.com)
Intel(R) Chipset Device Software (HKLM-x32...{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM...{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32...{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7263 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM...{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.7.9.1027 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32...{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32...{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel® Optane™ Pinning Explorer Extensions (HKLM...{95ED8AFD-8AB7-477D-8AC4-ACADAE167ADF}) (Version: 16.7.9.1027 - Intel Corporation)
Killer Ethernet Performance Driver Suite UWD (HKLM...{29348809-E240-49DF-A095-9987141548F0}) (Version: 1.7.1042 - Rivet Networks)
LibreOffice 6.1.6.3 (HKLM...{FDD378C0-438D-4E89-A692-6D010D5AF9D0}) (Version: 6.1.6.3 - The Document Foundation)
Malwarebytes version 4.0.4.49 (HKLM...{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Maxx Audio Installer (x64) (HKLM...{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9266.0 - Waves Audio Ltd.) Hidden
McAfee LiveSafe (HKLM-x32...\MSC) (Version: 16.0 R23 - McAfee, LLC.)
McAfee WebAdvisor (HKLM-x32...{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.67 - McAfee, LLC.)
Microsoft OneDrive (HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32...{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32...{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32...{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32...{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
NVIDIA GeForce Experience 3.14.0.139 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Graphics Driver 441.12 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 441.12 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Opera Stable 66.0.3515.72 (HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\Opera 66.0.3515.72) (Version: 66.0.3515.72 - Opera Software)
Qualcomm 11ac Wireless LAN&Bluetooth Installer (HKLM-x32...{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.10483 - Qualcomm)
Realtek High Definition Audio Driver (HKLM-x32...{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8248 - Realtek Semiconductor Corp.)
Speccy (HKLM...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32...{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Windows 7 Games for Windows 10 and 8 (HKLM...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
[HEADING=1]Packages:[/HEADING]
Bubble Witch 3 Saga → C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.5.9. 0_x86__kgqvnymyfvs32 [2020-02-10] (king.com)
Candy Crush Friends → C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.30. 3.0_x86__kgqvnymyfvs32 [2020-02-08] (king.com)
Candy Crush Saga → C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1700.2 .0_x86__kgqvnymyfvs32 [2020-02-13] (king.com)
Dell Customer Connect → C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.2. 21.0_x64__htrsf667h5kn2 [2020-01-10] (Dell Inc)
Dell Digital Delivery → C:\Program Files\WindowsApps\DellInc.DellDigitalDelivery_4.0. 51.0_x64__htrsf667h5kn2 [2020-01-27] (Dell Inc)
Dell Mobile Connect → C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0 [2019-05-10] (Screenovate Technologies) [Startup Task]
Dell Update → C:\Program Files\WindowsApps\DellInc.DellUpdate_3.1.54.0_x64_ _htrsf667h5kn2 [2019-12-19] (Dell Inc)
Dropbox promotion → C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64 __xbfy0k16fey96 [2020-01-16] (Dropbox Inc.)
HP Smart → C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1. 671.0_x64__v10z8vjag6ke6 [2020-02-06] (HP Inc.)
Killer Control Center → C:\Program Files\WindowsApps\RivetNetworks.KillerControlCente r_1.6.2148.0_x64__rh07ty8m5nkag [2019-05-10] (Rivet Networks LLC)
LinkedIn → C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1. 7098.0_neutral__w1wdnht996qgy [2019-05-10] (LinkedIn)
McAfee® Personal Security → C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.16.0 _x64__wafk5atnkzcwy [2019-10-09] (McAfee Inc.)
Media Suite Essentials for Dell → C:\Program Files\WindowsApps\DB6EA5DB.MediaSuiteEssentialsfor Dell_2.4.2725.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Microsoft Access → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_ 16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x64__8wekyb3d8bbwe [2019-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x86__8wekyb3d8bbwe [2019-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Excel → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_1 6051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft News → C:\Program Files\WindowsApps\Microsoft.BingNews_4.35.20273.0_ x64__8wekyb3d8bbwe [2020-02-06] (Microsoft Corporation) [MS Ad]
Microsoft Office Desktop Apps → C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.1 2430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Outlook → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook _16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft PowerPoint → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPo int_16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Publisher → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publish er_16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Remote Desktop → C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.1.114 9.0_x86__8wekyb3d8bbwe [2020-02-15] (Microsoft Corporation)
Microsoft Solitaire Collection → C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireColl ection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-11] (Microsoft Studios) [MS Ad]
Microsoft Word → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16 051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
MPEG-2 Video Extension → C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1. 0.22661.0_x64__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation)
MSN Weather → C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393 .0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Corporation) [MS Ad]
My Dell → C:\Program Files\WindowsApps\DellInc.MyDell_1.2.46.0_x64__htr sf667h5kn2 [2019-12-19] (Dell Inc)
Netflix → C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64_ _mcm4njqhnhss8 [2019-10-25] (Netflix, Inc.)
NVIDIA Control Panel → C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8. 1.956.0_x64__56jybvy8sckqj [2019-09-30] (NVIDIA Corp.)
Photos Add-on → C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Mai n_2017.39121.36610.0_x64__8wekyb3d8bbwe [2019-07-09] (Microsoft Corporation)
Power Media Player for Dell → C:\Program Files\WindowsApps\DB6EA5DB.PowerMediaPlayerforDell _14.1.9506.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Power2Go for Dell → C:\Program Files\WindowsApps\DB6EA5DB.Power2GoforDell_8.0.890 8.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.) [Startup Task]
PowerDirector for Dell → C:\Program Files\WindowsApps\DB6EA5DB.PowerDirectorforDell_15 .0.4409.0_x64__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Spotify Music → C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0 [2020-01-31] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1677839296-4017878107-255514410-1001_Classes\CLSID{9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF}\InprocServer32 → C:\Program Files\Honeyview\HVShell64.dll (Bandisoft → Bandisoft.com)
CustomCLSID: HKU\S-1-5-21-1677839296-4017878107-255514410-1001_Classes\CLSID{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 → C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc → Waves Audio Ltd)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] → {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.d ll [2018-10-15] () [File not signed]
ShellIconOverlayIdentifiers: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers1: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers1: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers1: [McCtxMenuFrmWrk] → {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2019-12-03] (McAfee, LLC. → McAfee, LLC.)
ContextMenuHandlers3: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers3: [OptaneContextMenu] → {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.d ll [2018-10-15] () [File not signed]
ContextMenuHandlers4: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers5: [igfxcui] → {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => → No File
ContextMenuHandlers5: [igfxDTCM] → {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\igfxDTCM.dll [2019-10-16] (Microsoft Windows Hardware Compatibility Publisher → Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] → {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\nvshext.dll [2019-12-11] (NVIDIA Corporation → NVIDIA Corporation)
ContextMenuHandlers6: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers6: [McCtxMenuFrmWrk] → {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2019-12-03] (McAfee, LLC. → McAfee, LLC.)
ContextMenuHandlers1_S-1-5-21-1677839296-4017878107-255514410-1001: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers4_S-1-5-21-1677839296-4017878107-255514410-1001: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-01-24 17:38 - 2020-01-24 17:38 - 000019456 _____ () [File not signed] C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.HSA.Server.dll
2018-10-15 17:52 - 2018-10-15 17:52 - 000126976 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsService Api.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The “AlternateShell” will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MBAMService => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MCODS => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\mcpltsvc => “”=“”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\ModuleCoreService => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\MBAMService => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mcapexe => “”=“”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\McMPFSvc => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\MCODS => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mcpltsvc => “”=“”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfeaack => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfeaack.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfeavfk => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfeavfk.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfefire => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfefirek => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfefirek.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfehidk => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfehidk.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfemms => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfeplk => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfeplk.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfetdi2k => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfetdi2k.sys => “”=“Driver”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\mfevtp => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\ModuleCoreService => “”=“Service”

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\Path → C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS;C:\Windows\system32;C:\Windows;C:\ Windows\System32\Wbem;C:\Windows\System32\WindowsP owerShell\v1.0;C:\Windows\System32\OpenSSH;C:\Prog ram Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%Sy stemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\ System32\WindowsPowerShell\v1.0;%SYSTEMROOT%\Syste m32\OpenSSH
HKU\S-1-5-21-1677839296-4017878107-255514410-1001\Control Panel\Desktop\Wallpaper → c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Pol icies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{1F9F9553-9D00-4D0C-9C25-F5DAEE0A55B8}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [TCP Query User{FF56D12A-E51B-43D9-A980-721C2F85287F}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [{59FE6F7B-A821-4DF9-8268-7EE520D3BD1B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve → Valve Corporation)
FirewallRules: [{DAFABEAC-8330-47EE-B29F-D9EE53B0A31E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve → Valve Corporation)
FirewallRules: [UDP Query User{FAB0F80E-A68D-4974-B785-A0D0921C9241}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [TCP Query User{FC73CBEE-EF3B-4D6F-A59B-9868249DBB90}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [{16BBC63C-0CE6-4817-A479-2606AE46E52B}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0\app\DellMo bileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.) [File not signed]
FirewallRules: [{F591C0D0-73D1-4270-90A4-DB4CED5B3576}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0\app\DellMo bileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.) [File not signed]
FirewallRules: [{5D4B98D6-D9A0-4BED-A5C6-F420C0568A15}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{4B116BA2-2F8B-4848-8757-18F730848910}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{77243A05-6157-470C-8787-80D7B6D32DB8}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, LLC. → McAfee, LLC.)
FirewallRules: [{FB075341-473A-4B6D-8E09-9D901A8BCEC0}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, LLC. → McAfee, LLC.)
FirewallRules: [{3861493E-B64C-4A02-BC1F-8ED83E2BBB8E}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, LLC. → McAfee, LLC.)
FirewallRules: [{2F0E8491-A09A-44BF-B390-50AF55616296}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{B7449BCD-5E12-433A-A72A-55D58B162F35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{523358B8-6B27-43D5-BD76-40763D0E58B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{B3E5E6EA-1C17-4938-AC03-34727079AEE7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{5F571963-DEE7-4F59-8257-7FCD6EA57435}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{FC097D9B-FB1C-4688-BA95-9D237D84FF73}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{9D627081-34A5-4DD6-93FA-5C39EE200FE1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC → Google LLC)
FirewallRules: [{AD4B20C3-E31E-4D1E-89CE-BDD3567C138A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{B0953F01-AE91-408F-943F-CCF7BA45F777}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{7AC579CD-0E07-40D7-813B-303FBFFDE50E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{E21F89BC-5102-4136-A6CB-EB6C91840B98}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{F27779B8-586A-4F0F-99C5-D71FEC4641DD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{89EB20B7-2C44-4BFC-B1B6-AC3929FB1822}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{25D2327F-1B34-49BD-B406-C4FED7A9B3C2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{18B36F39-31C6-41C5-9A3F-E7CA4BF46149}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{AE3EB668-3C2B-4FBA-8E07-4CB26A3D403A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{72CC28B1-3F14-4D82-BE21-818B6A49F84D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{169B123B-70B9-4C2D-917A-D648C028D0D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolcen\win_x64\Wolcen .exe (Wolcen Studio) [File not signed]
FirewallRules: [{AD4484F9-70B3-4B94-8709-9D1647C1164A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolcen\win_x64\Wolcen .exe (Wolcen Studio) [File not signed]
FirewallRules: [{29E85FBF-3DDD-4836-A14B-452062C432F1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook _16051.12430.20264.0_x86__8wekyb3d8bbwe\Office16\O UTLOOK.exe (Microsoft Corporation → Microsoft Corporation)

==================== Restore Points =========================

07-02-2020 22:37:25 Scheduled Checkpoint
13-02-2020 02:15:55 Windows Update
14-02-2020 17:32:40 Installed Steam

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================
[HEADING=1]Application errors:[/HEADING]
Error: (02/17/2020 09:46:24 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (19136,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/16/2020 11:23:35 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (19996,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/16/2020 11:10:48 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (18856,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/16/2020 11:02:37 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (21616,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/16/2020 10:38:43 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (16780,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/16/2020 10:29:57 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (21128,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/16/2020 10:11:18 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (2212,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/16/2020 10:03:54 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (23580,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.
[HEADING=1]System errors:[/HEADING]
Error: (02/16/2020 05:41:32 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/16/2020 10:35:23 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/16/2020 10:33:23 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/15/2020 02:35:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The WpnUserService_6829f service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/15/2020 01:31:09 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/14/2020 05:38:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.

Error: (02/14/2020 05:38:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.

Error: (02/13/2020 01:20:06 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
[HEADING=1]CodeIntegrity:[/HEADING]
Date: 2020-02-16 18:05:58.561
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-16 18:05:58.551
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-16 18:05:58.542
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-16 18:05:58.532
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-16 18:05:57.594
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-16 18:05:57.585
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-16 18:05:57.576
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2020-02-16 18:05:56.671
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\mcafee\mfeav\AMSIExt.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info ===========================

BIOS: Dell Inc. 1.1.3 11/02/2018
Motherboard: Dell Inc. 0H0P0M
Processor: Intel(R) Core™ i7-8700 CPU @ 3.20GHz
Percentage of memory in use: 46%
Total physical RAM: 16187.28 MB
Available physical RAM: 8707.14 MB
Total Virtual: 18619.28 MB
Available Virtual: 8908.06 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:219.56 GB) (Free:102.37 GB) NTFS
Drive d: (DATA) (Fixed) (Total:1862.89 GB) (Free:1860.4 GB) NTFS
Drive g: () (Removable) (Total:7.48 GB) (Free:7.48 GB) FAT32

\?\Volume{15053041-274d-4c07-92f3-fe27a5708f38}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.53 GB) NTFS
\?\Volume{ed7e443f-2fe5-4367-b81e-987b013811a5}\ (Image) (Fixed) (Total:16.01 GB) (Free:0.13 GB) NTFS
\?\Volume{e5034f44-c6cb-4e90-9978-dcc7fe089dd1}\ (DELLSUPPORT) (Fixed) (Total:1.16 GB) (Free:0.48 GB) NTFS
\?\Volume{803bf31e-8418-4367-8162-8f46e2f42bca}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.57 GB) FAT32

==================== MBR & Partition Table ====================

================================================== ========
Disk: 0 (Size: 1863 GB) (Disk ID: DB53DC21)

Partition: GPT.

================================================== ========
Disk: 1 (Size: 238.5 GB) (Disk ID: DB53DC18)

Partition: GPT.

================================================== ========
Disk: 3 (Size: 7.5 GB) (Disk ID: 8EAB9A2A)
Partition 1: (Not Active) - (Size=7.5 GB) - (Type=0B)

=============

[Rustys]

Relocating to malware removal section
@gus jmarket

Be patient while they go through the information and create the fix for you. Refer to here if you have not these will be the ONLY users allowed to assist you.

https://pchelpforum.net/t/read-before-following-prework-instructions.11236/

[jmarket]

Hello your frst log is incomplete. Dont worry about the others at the moment.

Also it is problematical to have more than one antivirus/malware suite running at the same time. Can you decide between Mcafee and Avast and remove the one you dont want. Please remove one and then paste fresh complete frst and addition logs.

[sorcerer]

Thanks for your help. Is it really necessary to delete one of the anti malware suites? Surely it’s extra protection?
And what do I do about the Avast pop-ups asking me to block or allow changes that your software wants to make? Block them or allow them?

[jmarket]

You need to allow them, otherwise our tools will not work

To quote gus, it’s actually a bad idea to have more than one antivirus running at the same time. It can cause collisions and false alarms and drag your system down.

You can have 1 AV and a anti-malware solution, such as Malwarebytes, Emsisoft, or Zemana. But it’s generally a very bad idea in the security world to run more than one AV at a time.

[sorcerer]

OK, thanks for the info. I’ll deactivate one of them, then do the scan aagain.

[sorcerer]

Ok, so I de-installed McAfee and ran your scan again, with updates allowed:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-02-2020
Ran by johnb (administrator) on DESKTOP-MQUKFNH (Dell Inc. XPS 8930) (18-02-2020 16:39:19)
Running from C:\Users\johnb\Desktop
Loaded Profiles: johnb (Available Profiles: johnb)
Platform: Windows 10 Home Version 1909 18363.657 (X64) Language: English (United States)
Default browser: Opera
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
(Dell Inc → ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(Dell Inc → ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(Dell Inc → Dell Inc.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRe medationService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\igfxCUIService.ex e
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\igfxEM.exe
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\IntelCpHDCPSvc.ex e
(Intel(R) pGFX → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\IntelCpHeciSvc.ex e
(Intel(R) Rapid Storage Technology → Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology → Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel(R) Rapid Storage Technology → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\RstMwService.exe
(Intel(R) Software Development Products → Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx _psw.inf_amd64_fd0b4b97d35097fa\aesm_service.exe
(Intel(R) Trust Services → Intel(R) Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe
(Malwarebytes Inc → Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc → Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(McAfee, LLC → McAfee, Inc.) C:\Program Files\mcafee\WebAdvisor\servicehost.exe
(McAfee, LLC → McAfee, Inc.) C:\Program Files\mcafee\WebAdvisor\uihost.exe
(McAfee, LLC. → McAfee, LLC.) C:\Program Files\Common Files\mcafee\platform\msm\McSmtFwk.exe
(McAfee, LLC. → McAfee, LLC.) C:\Program Files\mcafee\MQS\QcShm.exe
(McAfee, LLC. → McAfee, LLC.) C:\Program Files\mcafee\VUL\McVulCtr.exe
(Microsoft Corporation → Microsoft Corporation) C:\Users\johnb\AppData\Local\Microsoft\OneDrive\On eDrive.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows → Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher → Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(NVIDIA Corporation → NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation → NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\N VDisplay.Container.exe
(NVIDIA Corporation → NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\N VDisplay.Container.exe
(Piriform Software Ltd → Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Rivet Networks LLC → CloudBees, Inc.) C:\Windows\System32\drivers\RivetNetworks\Killer\x TendUtilityService.exe
(Rivet Networks LLC → Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\x TendUtility.exe
(Rivet Networks LLC → Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\K illerNetworkService.exe
(Waves Inc → Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Waves Inc → Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [319520 2018-10-27] (Intel(R) Rapid Storage Technology → Intel Corporation)
HKLM...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-09-07] (Realtek Semiconductor Corp. → Realtek Semiconductor)
HKLM...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1493992 2017-09-07] (Realtek Semiconductor Corp. → Realtek Semiconductor)
HKLM...\Run: [DellMobileConnectWelcome] => C:\Program Files\Dell\DellMobileConnectDrivers\DellMobileConn ectWStartup.exe [313064 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
HKLM...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
HKLM...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1198448 2017-08-30] (Waves Inc → Waves Audio Ltd.)
HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-16] (Piriform Software Ltd → Piriform Ltd)
HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\Run: [Steam] => C:\Program Files (x86)\Steam\Steam.exe [3365840 2020-02-11] (Valve → Valve Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] → C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Inst aller\chrmstp.exe [2020-01-21] (Google LLC → Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {080122B9-6627-4991-8195-61FDF454AE0D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [857024 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {0E4D0AEF-1126-40D5-B7D6-7D1EB201D9C9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [982464 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {3210BA52-983D-40D0-8AAF-F16DBC0B6449} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [816960 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
Task: {3FA3E710-1D65-4331-BCDA-4BAE4DA31F44} - System32\Tasks\Opera scheduled Autoupdate 1557493179 => C:\Users\johnb\AppData\Local\Programs\Opera\launch er.exe [1532952 2020-02-05] (Opera Software AS → Opera Software)
Task: {40380448-F6A6-45D5-B6EC-32604FE42C55} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {477F3A58-8891-4FDB-93DB-8F34F2509A31} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {4A9DFFA5-8FF8-4B55-BFBF-328A12EA9E82} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3297728 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {52079FA4-9685-479A-9556-66B6ACDBB148} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
Task: {5699EF4E-B305-493F-91B5-7E285BFBFE53} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [857024 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {6C36BA9B-01EE-4C8B-817A-E505446B59F9} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {81549073-BF0B-4FCE-A93A-E89865B9DD0D} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-19] (AVAST Software s.r.o. → AVAST Software)
Task: {8E6A4351-85A0-4619-A436-BA5C44F57102} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {95B578E5-5177-4B6D-8AF4-66038FEEFF8E} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [934848 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {A015C48E-6263-4DFB-8407-2D4D40A61E58} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-05-11] (Google Inc → Google Inc.)
Task: {A20DC11C-D3EB-4C76-87A8-F8E898333FD9} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-16] (Piriform Software Ltd → Piriform Software Ltd)
Task: {BA990EA0-F2A4-467F-B5D7-B87DE7696D43} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [654784 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {BECA6D38-F3C8-4ED9-98E6-A4B403E1346D} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE195 2-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
Task: {E1DCB656-C0BE-48B6-9A69-BA7946D6EB67} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-16] (Piriform Software Ltd → Piriform Ltd)
Task: {E2282557-6FE2-4817-944A-93CA1426A4C6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2019-05-11] (Google Inc → Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip..\Interfaces{5ce95e72-df66-4a08-8574-122ce42f266e}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip..\Interfaces{978c1f44-9dc0-4590-80b7-56e596bd69d3}: [DhcpNameServer] 192.168.1.1 192.168.1.1
[HEADING=1]Internet Explorer:[/HEADING]
HKU\S-1-5-21-1677839296-4017878107-255514410-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17win10.msn.com/?pc=DCTE
HKU\S-1-5-21-1677839296-4017878107-255514410-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
BHO: McAfee WebAdvisor → {B164E929-A1B6-4A06-B104-2CD0E90A88FF} → C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-02-05] (McAfee, LLC → McAfee, Inc.)
BHO-x32: McAfee WebAdvisor → {B164E929-A1B6-4A06-B104-2CD0E90A88FF} → C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-02-05] (McAfee, LLC → McAfee, Inc.)
[HEADING=1]FireFox:[/HEADING]
FF HKLM...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-02-05]
FF HKLM-x32...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
[HEADING=1]Chrome:[/HEADING]
CHR Profile: C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default [2020-02-02]
CHR StartupUrls: Default → “hxxp://www.google.com”
CHR Extension: (Slides) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhon fmgoek [2019-05-11]
CHR Extension: (Docs) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfi lokake [2019-05-11]
CHR Extension: (YouTube) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldk acnbeo [2019-05-11]
CHR Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihc jkigck [2019-12-24]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepao oicaho [2019-12-11]
CHR Extension: (Chrome Web Store Payments) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccm gmieda [2019-12-11]
CHR Extension: (Chrome Media Router) - C:\Users\johnb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcj beemfm [2019-12-24]
CHR HKLM...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
[HEADING=1]Opera:[/HEADING]
OPR Notifications: hxxps://pchelpforum.net

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 0089261582040107mcinstcleanup; C:\ProgramData\McInstTemp0089261582040107\mcinst.e xe [953304 2019-11-20] (McAfee, LLC → McAfee, LLC.)
R2 AESMService; C:\WINDOWS\System32\DriverStore\FileRepository\sgx _psw.inf_amd64_fd0b4b97d35097fa\aesm_service.exe [716824 2019-09-22] (Intel(R) Software Development Products → Intel Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2019-12-19] (AVAST Software s.r.o. → AVAST Software)
R2 AtherosSvc; C:\WINDOWS\System32\drivers\AdminService.exe [386976 2019-08-08] (Microsoft Windows Hardware Compatibility Publisher → Windows (R) Win 7 DDK provider)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [417536 2020-02-14] (AVAST Software s.r.o. → AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [38096 2020-01-24] (Dell Inc → )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRe medationService.exe [293528 2018-10-20] (Dell Inc → Dell Inc.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [36032 2019-11-08] (Dell Inc → )
S4 HfcDisableService; C:\WINDOWS\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\HfcDisableService .exe [1881672 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
S3 iaStorAfsService; C:\WINDOWS\System32\iaStorAfsService.exe [2859592 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [742704 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [668472 2017-10-12] (Intel(R) Trust Services → Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [213648 2017-11-09] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\K illerNetworkService.exe [2484408 2018-07-30] (Rivet Networks LLC → Rivet Networks)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2020-02-16] (Malwarebytes Inc → Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [915832 2020-02-05] (McAfee, LLC → McAfee, Inc.)
S3 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764352 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
R2 RstMwService; C:\WINDOWS\System32\DriverStore\FileRepository\ias torac.inf_amd64_eea3cf789013ad4f\RstMwService.exe [2156616 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324584 2017-09-07] (Realtek Semiconductor Corp. → Realtek Semiconductor)
R2 WavesSysSvc; C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe [829816 2017-08-30] (Waves Inc → Waves Audio Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation → Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation → Microsoft Corporation)
S2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\x TendSoftAPService.exe [72888 2018-07-30] (Rivet Networks LLC → CloudBees, Inc.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\x TendUtilityService.exe [72888 2018-07-30] (Rivet Networks LLC → CloudBees, Inc.)
S3 mfefire; “C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe”
S2 mfemms; “C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe”
S3 mfevtp; “C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe”
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\N VDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\Display.NvContainer\p lugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
R2 NvTelemetryContainer; “C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe” -s NvTelemetryContainer -f “C:\ProgramData\NVIDIA\NvTelemetryContainer.log” -l 3 -d “C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins” -r

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [204824 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [274456 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [209552 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [65120 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2019-10-03] (Microsoft Windows Early Launch Anti-malware Publisher → AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42736 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [161544 2019-11-02] (AVAST Software s.r.o. → AVAST Software)
R1 aswNetSec; C:\WINDOWS\System32\drivers\aswNetSec.sys [552848 2020-02-14] (AVAST Software s.r.o. → AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110320 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83792 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [848432 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460448 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [236024 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [316528 2019-10-03] (AVAST Software s.r.o. → AVAST Software)
R4 DBUtil_2_3; C:\WINDOWS\TEMP\DBUtil_2_3.Sys [14840 2020-02-14] (Dell Inc. → )
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [36728 2019-05-21] (Microsoft Windows Hardware Compatibility Publisher → Dell Inc.)
R3 e2xw10x64; C:\WINDOWS\System32\drivers\e2xw10x64.sys [164816 2018-11-26] (Rivet Networks LLC → Qualcomm Atheros, Inc.)
R3 HfAudio; C:\WINDOWS\System32\drivers\HfAudio.sys [91200 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
S3 iaLPSS2_GPIO2; C:\WINDOWS\System32\drivers\iaLPSS2_GPIO2.sys [98968 2017-10-16] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R0 iaStorAC; C:\WINDOWS\System32\drivers\iaStorAC.sys [1033288 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
S3 iaStorAfs; C:\WINDOWS\System32\drivers\iaStorAfs.sys [72776 2019-05-20] (Intel(R) Rapid Storage Technology → Intel Corporation)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\K feCo10X64.sys [144592 2018-07-30] (Rivet Networks LLC → Rivet Networks, LLC.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-02-16] (Malwarebytes Inc → Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-02-16] (Microsoft Windows Early Launch Anti-malware Publisher → Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-02-16] (Malwarebytes Inc → Malwarebytes)
R3 MEIx64; C:\WINDOWS\System32\DriverStore\FileRepository\hec i.inf_amd64_85021432489d6a1c\x64\TeeDriverW8x64.sy s [266128 2019-04-17] (Intel(R) Embedded Subsystems and IP Blocks Group → Intel Corporation)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\nvlddmkm.sys [22739392 2019-12-11] (NVIDIA Corporation → NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30656 2018-05-20] (NVIDIA Corporation → NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [67432 2018-03-15] (NVIDIA Corporation → NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [68112 2018-04-28] (NVIDIA Corporation → NVIDIA Corporation)
R3 ScrHIDDriver2; C:\WINDOWS\System32\drivers\ScrHIDDriver2.sys [75800 2018-10-05] (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher → Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows → Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows → Microsoft Corporation)
S0 cfwids; system32\drivers\cfwids.sys
R0 mfeaack; system32\drivers\mfeaack.sys
R0 mfeavfk; system32\drivers\mfeavfk.sys
S0 mfeelamk; system32\drivers\mfeelamk.sys
S0 mfefirek; system32\drivers\mfefirek.sys
R0 mfehidk; system32\drivers\mfehidk.sys
R0 mfeplk; system32\drivers\mfeplk.sys
R0 mfewfpk; system32\drivers\mfewfpk.sys

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-18 16:39 - 2020-02-18 16:39 - 000025826 _____ C:\Users\johnb\Desktop\FRST.txt
2020-02-18 16:35 - 2020-02-18 16:35 - 000000000 ____D C:\ProgramData\McInstTemp0089261582040107
2020-02-17 11:46 - 2020-02-17 11:46 - 000000000 _____ C:\WINDOWS\invcol.tmp
2020-02-17 10:20 - 2020-02-18 16:39 - 000000000 ____D C:\FRST
2020-02-17 10:19 - 2020-02-17 10:19 - 002279424 _____ (Farbar) C:\Users\johnb\Desktop\FRST64.exe
2020-02-16 18:14 - 2020-02-16 18:14 - 000118422 _____ C:\Users\johnb\Documents\cc_20200216_181438.reg
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\mbamtray
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\mbam
2020-02-16 18:06 - 2020-02-16 18:06 - 000000000 ____D C:\Users\johnb\AppData\Local\cache
2020-02-16 18:05 - 2020-02-16 18:05 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-02-16 18:05 - 2020-02-16 18:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-02-16 18:05 - 2020-02-16 18:05 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-02-16 18:04 - 2020-02-16 18:04 - 001924728 _____ (Malwarebytes) C:\Users\johnb\Downloads\MBSetup.exe
2020-02-16 18:04 - 2020-02-16 18:04 - 000000000 ____D C:\Program Files\Malwarebytes
2020-02-15 13:05 - 2020-02-15 13:05 - 000000000 ____D C:\Users\johnb\AppData\Roaming\GameSparks
2020-02-15 10:17 - 2020-02-15 10:17 - 000000222 _____ C:\Users\johnb\Desktop\Wolcen Lords of Mayhem.url
2020-02-14 17:32 - 2020-02-16 18:16 - 000000000 ____D C:\Program Files (x86)\Steam
2020-02-14 17:32 - 2020-02-14 17:32 - 001669632 _____ C:\Users\johnb\Downloads\SteamInstall.msi
2020-02-14 17:32 - 2020-02-14 17:32 - 000000988 _____ C:\Users\Public\Desktop\Steam.lnk
2020-02-14 17:32 - 2020-02-14 17:32 - 000000988 _____ C:\ProgramData\Desktop\Steam.lnk
2020-02-14 17:32 - 2020-02-14 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2020-02-14 10:59 - 2020-02-14 10:59 - 000552848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys
2020-02-14 10:59 - 2020-02-14 10:59 - 000002090 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium Security.lnk
2020-02-14 10:59 - 2019-10-03 14:21 - 000355720 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-02-13 04:06 - 2020-02-13 04:06 - 000000000 ____D C:\ProgramData\ssh
2020-02-13 04:06 - 2020-02-13 04:06 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2020-02-13 02:20 - 2020-02-13 02:20 - 025900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 022635008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 019813376 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 018026496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 017787904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 009929016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007905208 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007754752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007600448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayR eady.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007259648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006519752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayR eady.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006284800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006231200 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006167552 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 006083832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005912064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005764664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005502464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005112320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004856832 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004615376 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 004575232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004562896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004348616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004308480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 004005888 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003967888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 003820032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003792384 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003728896 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 003703296 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 003550208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003484672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003372440 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003263488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003243080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 003110400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002988552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002870272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002773776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002766088 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-02-13 02:20 - 2020-02-13 02:20 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-02-13 02:20 - 2020-02-13 02:20 - 002714624 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 002703872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002584008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002561536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002493720 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002314952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002305536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002284544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.oneco re.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002260176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002230232 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002225160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002125904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002084576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002071552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 002032128 _____ C:\WINDOWS\system32\rdpnano.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001942016 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001916744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001858560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001835128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.deskt op.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001726480 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001693184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001664696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001664680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001655880 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001541632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001540096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001505592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001489064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001417760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001413912 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001398584 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001394168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 001284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001283592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2020-02-13 02:20 - 2020-02-13 02:20 - 001273856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001272360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001218120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001182232 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001170960 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001154448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001149928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001105776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001098720 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001084216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001083392 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001080832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001077264 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001051448 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001009664 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 001000960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000996352 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSSO.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000928120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000904504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000895488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000892488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000891736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000875448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000857088 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000851968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000824848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000805376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000804872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000788992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000774664 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000768488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000758800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000737280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000732200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense. dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows. dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000704512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000679368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000678928 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000670720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000642008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000637968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000597816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000589592 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000587064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000568120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000545432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000537608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000516648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000510768 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2020-02-13 02:20 - 2020-02-13 02:20 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000486400 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-02-13 02:20 - 2020-02-13 02:20 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000459896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Conve rsationalAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000453432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000441072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2020-02-13 02:20 - 2020-02-13 02:20 - 000416056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000405632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000400696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000399360 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.d ll
2020-02-13 02:20 - 2020-02-13 02:20 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000375504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000369504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000366416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000335448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324616 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000311096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000300392 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000296760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.d ll
2020-02-13 02:20 - 2020-02-13 02:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msutb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAcc ess.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000274464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFMCP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000259984 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapisrv.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\srrstr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Winlangdb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000220984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msutb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP .dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\recdisc.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000194064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000193800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000190256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-02-13 02:20 - 2020-02-13 02:20 - 000186880 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000186672 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47mrm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000179720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Winlangdb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionA lias.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApp s.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000150536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000143160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000133464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47mrm.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000132624 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\globinputhost.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000128528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000117264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetDriverInstall.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000106808 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfrgui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000097080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\globinputhost.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedsbs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000093496 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dfrgui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthSystray.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetDriverInstall.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedsbs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000072816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguageProfileCallback.dl l
2020-02-13 02:20 - 2020-02-13 02:20 - 000059221 _____ C:\WINDOWS\system32\srms.dat
2020-02-13 02:20 - 2020-02-13 02:20 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SrTasks.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcicda.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000047208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Websocket.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguageProfileCallback.dl l
2020-02-13 02:20 - 2020-02-13 02:20 - 000042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcicda.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000037392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciwave.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000032056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2020-02-13 02:20 - 2020-02-13 02:20 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mciseq.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciwave.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mciseq.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-02-13 02:20 - 2020-02-13 02:20 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeedssync.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeedssync.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-02-13 02:20 - 2020-02-13 02:20 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-02-13 02:16 - 2020-01-16 06:07 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-02-13 02:16 - 2020-01-16 05:23 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-02-10 17:20 - 2020-02-10 17:20 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_ 11_00.Wdf
2020-02-10 17:20 - 2020-02-10 17:20 - 000000000 ____D C:\Users\johnb\AppData\Roaming\CANON INC
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\Users\johnb\AppData\Roaming\canon
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\ProgramData\Canon_Inc_IC
2020-02-07 14:22 - 2020-02-07 14:22 - 000000000 ____D C:\Program Files (x86)\Canon
2020-02-07 14:21 - 2020-02-07 14:22 - 040044345 _____ C:\Users\johnb\Downloads\cdw-inst-8-10-4a-24-r2-u01-9l.zip
2020-02-01 13:32 - 2020-02-01 13:32 - 000000000 ____D C:\Users\johnb\AppData\Local\NVIDIA
2020-01-29 12:00 - 2020-01-29 12:00 - 005192280 _____ (Husdawg, LLC) C:\Users\johnb\Downloads\Detection.exe
2020-01-27 14:19 - 2020-01-27 14:19 - 000000000 ____D C:\Program Files (x86)\DummyDir
2020-01-22 23:01 - 2020-01-23 11:52 - 1468520317 _____ C:\Users\johnb\Downloads\Brecha-2009.rar
2020-01-22 02:20 - 2019-12-11 02:19 - 001073864 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 001073864 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000931528 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000931528 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000848584 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000848584 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000706248 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000706248 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-01-22 02:20 - 2019-12-11 02:19 - 000450392 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-01-22 02:20 - 2019-12-11 02:19 - 000352512 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-01-22 02:20 - 2019-12-11 02:18 - 011839856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2020-01-22 02:20 - 2019-12-11 02:18 - 010164936 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 002074504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001568688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001483640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001370032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001144064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001065392 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 001000792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000824712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000812800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000686592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000677072 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000658680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000573360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-01-22 02:20 - 2019-12-11 02:17 - 000558080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000545112 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-01-22 02:20 - 2019-12-11 02:17 - 000055632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 040510848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 035379448 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 017461248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 015028568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 005380296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 004716376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-01-22 02:20 - 2019-12-11 02:16 - 000857856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-01-22 02:20 - 2019-12-11 02:16 - 000453120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-01-22 02:20 - 2019-12-11 02:15 - 004205776 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-01-22 02:20 - 2019-12-11 01:59 - 000075819 _____ C:\WINDOWS\system32\nvinfo.pb

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-02-18 16:36 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-02-18 16:36 - 2019-03-19 05:37 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2020-02-18 16:35 - 2019-03-27 05:27 - 000000000 ____D C:\ProgramData\McAfee
2020-02-18 16:35 - 2019-03-27 05:27 - 000000000 ____D C:\Program Files\Common Files\mcafee
2020-02-18 16:34 - 2019-05-10 13:48 - 000000000 ____D C:\Users\johnb\AppData\Local\Packages
2020-02-18 16:34 - 2019-03-19 05:52 - 000000000 _D C:\WINDOWS\AppReadiness
2020-02-18 16:34 - 2019-03-19 05:52 - 000000000 D C:\ProgramData\regid.1991-06.com.microsoft
2020-02-18 16:33 - 2019-12-23 02:54 - 000000000 D C:\WINDOWS\system32\SleepStudy
2020-02-18 16:16 - 2019-12-23 02:59 - 000003512 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1557493179
2020-02-18 16:16 - 2019-12-23 02:59 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineU A
2020-02-18 16:16 - 2019-12-23 02:59 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLog on{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000003180 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2020-02-18 16:16 - 2019-12-23 02:59 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineC ore
2020-02-18 16:16 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR3{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR2{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000003016 _____ C:\WINDOWS\system32\Tasks\NvTmRepCR1{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-02-18 16:16 - 2019-12-23 02:59 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1677839296-4017878107-255514410-1001
2020-02-18 16:16 - 2019-12-23 02:59 - 000002852 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1677839296-4017878107-255514410-500
2020-02-18 16:16 - 2019-12-23 02:59 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-02-18 16:16 - 2019-12-23 02:59 - 000002236 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-02-18 16:16 - 2019-12-23 02:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-02-18 16:06 - 2019-05-10 17:01 - 000000000 ____D C:\Users\johnb\AppData\Local\Battle.net
2020-02-18 13:15 - 2019-05-10 17:04 - 000000000 ____D C:\Program Files (x86)\Diablo III
2020-02-18 12:25 - 2019-03-27 05:24 - 000000000 ____D C:\ProgramData\NVIDIA
2020-02-18 11:39 - 2019-03-27 05:24 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2020-02-17 19:27 - 2019-06-02 12:59 - 000000000 ____D C:\Users\johnb\AppData\Local\D3DSCache
2020-02-17 16:09 - 2019-10-15 09:55 - 000000000 ____D C:\Program Files (x86)\Diablo III Public Test
2020-02-16 12:10 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF
2020-02-16 05:29 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-02-15 10:17 - 2019-05-10 14:54 - 000000000 ____D C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Steam
2020-02-15 04:13 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2020-02-15 04:13 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-02-14 17:32 - 2019-12-23 02:55 - 000000000 ____D C:\Users\johnb
2020-02-14 11:29 - 2019-12-23 03:01 - 000797848 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-02-14 11:24 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\Registration
2020-02-14 11:22 - 2019-12-23 02:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-02-14 11:22 - 2019-05-10 13:48 - 000000000 __SHD C:\Users\johnb\IntelGraphicsProfiles
2020-02-14 11:21 - 2019-10-21 08:26 - 000044604 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_ backup1
2020-02-14 11:21 - 2019-10-21 08:26 - 000031754 _____ C:\ProgramData\DisplaySessionContainer1.log_backup 1
2020-02-14 11:21 - 2019-10-21 08:26 - 000024798 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_back up1
2020-02-14 11:21 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-02-14 10:59 - 2019-12-23 02:59 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-02-13 04:07 - 2020-01-15 02:25 - 000001205 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-02-13 04:07 - 2019-12-23 02:54 - 000438640 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-02-13 04:07 - 2019-05-10 13:48 - 000000000 ___RD C:\Users\johnb\3D Objects
2020-02-13 04:07 - 2019-03-27 05:27 - 000000000 ____D C:\Program Files (x86)\McAfee
2020-02-13 04:07 - 2019-03-17 08:13 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\PrintDialog
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-02-13 04:06 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-02-13 04:06 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\servicing
2020-02-13 02:23 - 2019-05-10 16:44 - 000000000 ____D C:\WINDOWS\system32\MRT
2020-02-13 02:22 - 2019-05-10 16:44 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2020-02-08 19:34 - 2019-12-23 02:55 - 000002365 _____ C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\OneDrive.lnk
2020-02-08 19:34 - 2019-05-10 13:49 - 000000000 ___RD C:\Users\johnb\OneDrive
2020-02-07 22:28 - 2019-05-10 16:59 - 000000000 ____D C:\Program Files (x86)\Battle.net
2020-02-07 09:57 - 2019-05-10 13:59 - 000001401 _____ C:\Users\johnb\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\Opera Browser.lnk
2020-02-04 20:57 - 2019-05-10 18:27 - 000000000 ____D C:\Users\johnb\Documents\Diablo III
2020-02-03 21:56 - 2019-03-19 05:56 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-02-03 21:56 - 2019-03-19 05:56 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-02-01 15:41 - 2020-01-08 13:12 - 000030649 _____ C:\Users\johnb\Documents\cash20.ods
2020-01-26 11:55 - 2019-06-07 17:01 - 000022590 _____ C:\Users\johnb\Documents\newfamily.ods
2020-01-21 21:51 - 2019-05-11 09:56 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)
[HEADING=1]==================== End of FRST.txt ===============
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-02-2020
Ran by johnb (18-02-2020 16:40:22)
Running from C:\Users\johnb\Desktop
Windows 10 Home Version 1909 18363.657 (X64) (2019-12-23 02:00:01)
Boot Mode: Normal[/HEADING]
==================== Accounts: =============================

Administrator (S-1-5-21-1677839296-4017878107-255514410-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1677839296-4017878107-255514410-503 - Limited - Disabled)
Guest (S-1-5-21-1677839296-4017878107-255514410-501 - Limited - Disabled)
johnb (S-1-5-21-1677839296-4017878107-255514410-1001 - Administrator - Enabled) => C:\Users\johnb
WDAGUtilityAccount (S-1-5-21-1677839296-4017878107-255514410-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {4DE344F8-6897-65B4-CED0-82B3AF2591B4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}

==================== Installed Programs ======================

(Only the adware programs with “Hidden” flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Premium Security (HKLM-x32...\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Battle.net (HKLM-x32...\Battle.net) (Version: - Blizzard Entertainment)
Canon Utilities CameraWindow DC 8 (HKLM-x32...\CameraWindowDC) (Version: 8.10.4.24 - Canon Inc.)
CCleaner (HKLM...\CCleaner) (Version: 5.62 - Piriform)
Dell Digital Delivery Services (HKLM-x32...{2F67D318-DCDC-4D94-9048-37789F3C065B}) (Version: 4.0.51.0 - Dell Inc.)
Dell Mobile Connect Drivers (HKLM...{04DF02C6-E3D7-4D26-A44C-6F8A2E218D2C}) (Version: 1.3.6844 - Screenovate Technologies Ltd.)
Dell SupportAssist Remediation (HKLM...{03C35F56-A9AD-4B59-B061-B8CE41C4C22B}) (Version: 4.1.0.6830 - Dell Inc.) Hidden
Dell SupportAssist Remediation (HKLM-x32...{f4ee83d8-d901-4c1a-b5a2-288427598fe2}) (Version: 4.1.0.6830 - Dell Inc.)
Dell Update - SupportAssist Update Plugin (HKLM...{9BEF4D9A-592C-4073-B202-30234347B3DA}) (Version: 4.1.0.6830 - Dell Inc.) Hidden
Dell Update - SupportAssist Update Plugin (HKLM-x32...{286db51f-336c-4d5e-b1e2-3fbc3becd693}) (Version: 4.1.0.6830 - Dell Inc.)
Dell Update for Windows 10 (HKLM...{70E9F8CC-A23E-4C25-B292-C86C1821587C}) (Version: 3.1.0 - Dell, Inc.)
Diablo III (HKLM-x32...\Diablo III) (Version: - Blizzard Entertainment)
Diablo III Public Test (HKLM-x32...\Diablo III Public Test) (Version: - Blizzard Entertainment)
Google Chrome (HKLM-x32...\Google Chrome) (Version: 79.0.3945.130 - Google LLC)
Google Update Helper (HKLM-x32...{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.441 - Google LLC) Hidden
Honeyview (HKLM...\Honeyview) (Version: 5.31 - Bandisoft.com)
Intel(R) Chipset Device Software (HKLM-x32...{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM...{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32...{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7263 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM...{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.7.9.1027 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32...{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32...{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel® Optane™ Pinning Explorer Extensions (HKLM...{95ED8AFD-8AB7-477D-8AC4-ACADAE167ADF}) (Version: 16.7.9.1027 - Intel Corporation)
Killer Ethernet Performance Driver Suite UWD (HKLM...{29348809-E240-49DF-A095-9987141548F0}) (Version: 1.7.1042 - Rivet Networks)
LibreOffice 6.1.6.3 (HKLM...{FDD378C0-438D-4E89-A692-6D010D5AF9D0}) (Version: 6.1.6.3 - The Document Foundation)
Malwarebytes version 4.0.4.49 (HKLM...{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Maxx Audio Installer (x64) (HKLM...{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9266.0 - Waves Audio Ltd.) Hidden
McAfee WebAdvisor (HKLM-x32...{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.67 - McAfee, LLC.)
Microsoft OneDrive (HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\OneDriveSetup.exe) (Version: 19.232.1124.0005 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32...{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32...{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32...{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32...{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32...{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32...{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
NVIDIA GeForce Experience 3.14.0.139 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Graphics Driver 441.12 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 441.12 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM...{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Opera Stable 66.0.3515.72 (HKU\S-1-5-21-1677839296-4017878107-255514410-1001...\Opera 66.0.3515.72) (Version: 66.0.3515.72 - Opera Software)
Qualcomm 11ac Wireless LAN&Bluetooth Installer (HKLM-x32...{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.10483 - Qualcomm)
Realtek High Definition Audio Driver (HKLM-x32...{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8248 - Realtek Semiconductor Corp.)
Speccy (HKLM...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32...{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Windows 7 Games for Windows 10 and 8 (HKLM...\Win7Games) (Version: 2.0 - hxxp://winaero.com)
[HEADING=1]Packages:[/HEADING]
Bubble Witch 3 Saga → C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.5.9. 0_x86__kgqvnymyfvs32 [2020-02-10] (king.com)
Candy Crush Friends → C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.30. 3.0_x86__kgqvnymyfvs32 [2020-02-08] (king.com)
Candy Crush Saga → C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1700.2 .0_x86__kgqvnymyfvs32 [2020-02-13] (king.com)
Dell Customer Connect → C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.2. 21.0_x64__htrsf667h5kn2 [2020-01-10] (Dell Inc)
Dell Digital Delivery → C:\Program Files\WindowsApps\DellInc.DellDigitalDelivery_4.0. 51.0_x64__htrsf667h5kn2 [2020-01-27] (Dell Inc)
Dell Mobile Connect → C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0 [2019-05-10] (Screenovate Technologies) [Startup Task]
Dell Update → C:\Program Files\WindowsApps\DellInc.DellUpdate_3.1.54.0_x64_ _htrsf667h5kn2 [2019-12-19] (Dell Inc)
Dropbox promotion → C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64 __xbfy0k16fey96 [2020-01-16] (Dropbox Inc.)
HP Smart → C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1. 671.0_x64__v10z8vjag6ke6 [2020-02-06] (HP Inc.)
Killer Control Center → C:\Program Files\WindowsApps\RivetNetworks.KillerControlCente r_1.6.2148.0_x64__rh07ty8m5nkag [2019-05-10] (Rivet Networks LLC)
LinkedIn → C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1. 7098.0_neutral__w1wdnht996qgy [2019-05-10] (LinkedIn)
Media Suite Essentials for Dell → C:\Program Files\WindowsApps\DB6EA5DB.MediaSuiteEssentialsfor Dell_2.4.2725.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Microsoft Access → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_ 16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x64__8wekyb3d8bbwe [2019-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.18 11.1.0_x86__8wekyb3d8bbwe [2019-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Excel → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_1 6051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft News → C:\Program Files\WindowsApps\Microsoft.BingNews_4.35.20273.0_ x64__8wekyb3d8bbwe [2020-02-06] (Microsoft Corporation) [MS Ad]
Microsoft Office Desktop Apps → C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.1 2430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Outlook → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook _16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft PowerPoint → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPo int_16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Publisher → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publish er_16051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
Microsoft Remote Desktop → C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.1.114 9.0_x86__8wekyb3d8bbwe [2020-02-15] (Microsoft Corporation)
Microsoft Solitaire Collection → C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireColl ection_4.5.12061.0_x64__8wekyb3d8bbwe [2019-12-11] (Microsoft Studios) [MS Ad]
Microsoft Word → C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16 051.12430.20264.0_x86__8wekyb3d8bbwe [2020-02-16] (Microsoft Corporation)
MPEG-2 Video Extension → C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1. 0.22661.0_x64__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation)
MSN Weather → C:\Program Files\WindowsApps\Microsoft.BingWeather_4.34.13393 .0_x64__8wekyb3d8bbwe [2019-12-18] (Microsoft Corporation) [MS Ad]
My Dell → C:\Program Files\WindowsApps\DellInc.MyDell_1.2.46.0_x64__htr sf667h5kn2 [2019-12-19] (Dell Inc)
Netflix → C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64_ _mcm4njqhnhss8 [2019-10-25] (Netflix, Inc.)
NVIDIA Control Panel → C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8. 1.956.0_x64__56jybvy8sckqj [2019-09-30] (NVIDIA Corp.)
Photos Add-on → C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Mai n_2017.39121.36610.0_x64__8wekyb3d8bbwe [2019-07-09] (Microsoft Corporation)
Power Media Player for Dell → C:\Program Files\WindowsApps\DB6EA5DB.PowerMediaPlayerforDell _14.1.9506.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Power2Go for Dell → C:\Program Files\WindowsApps\DB6EA5DB.Power2GoforDell_8.0.890 8.0_x86__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.) [Startup Task]
PowerDirector for Dell → C:\Program Files\WindowsApps\DB6EA5DB.PowerDirectorforDell_15 .0.4409.0_x64__mcezb6ze687jp [2019-05-10] (CYBERLINK CORPORATION.)
Spotify Music → C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0 [2020-01-31] (Spotify AB) [Startup Task]

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1677839296-4017878107-255514410-1001_Classes\CLSID{9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF}\InprocServer32 → C:\Program Files\Honeyview\HVShell64.dll (Bandisoft → Bandisoft.com)
CustomCLSID: HKU\S-1-5-21-1677839296-4017878107-255514410-1001_Classes\CLSID{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 → C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc → Waves Audio Ltd)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] → {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.d ll [2018-10-15] () [File not signed]
ShellIconOverlayIdentifiers: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers1: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers1: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers3: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers3: [OptaneContextMenu] → {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.d ll [2018-10-15] () [File not signed]
ContextMenuHandlers4: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers5: [igfxcui] → {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => → No File
ContextMenuHandlers5: [igfxDTCM] → {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki1 33889.inf_amd64_b4f1426b0a27dd87\igfxDTCM.dll [2019-10-16] (Microsoft Windows Hardware Compatibility Publisher → Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] → {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvd d.inf_amd64_90c9fd93d2dcbc55\nvshext.dll [2019-12-11] (NVIDIA Corporation → NVIDIA Corporation)
ContextMenuHandlers6: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-10-03] (AVAST Software s.r.o. → AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] → {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation → Malwarebytes)
ContextMenuHandlers1_S-1-5-21-1677839296-4017878107-255514410-1001: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)
ContextMenuHandlers4_S-1-5-21-1677839296-4017878107-255514410-1001: [0HVContext] → {9B6D38F3-8EF4-48A5-AD30-FFFFFFFFFFFF} => C:\Program Files\Honeyview\HVShell64.dll [2018-09-30] (Bandisoft → Bandisoft.com)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-01-24 17:38 - 2020-01-24 17:38 - 000019456 _____ () [File not signed] C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.HSA.Server.dll
2018-10-15 17:52 - 2018-10-15 17:52 - 000126976 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsService Api.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The “AlternateShell” will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MBAMService => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Min imal\MCODS => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\MBAMService => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\McMPFSvc => “”=“Service”
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Net work\MCODS => “”=“Service”

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\Path → C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS;C:\Windows\system32;C:\Windows;C:\ Windows\System32\Wbem;C:\Windows\System32\WindowsP owerShell\v1.0;C:\Windows\System32\OpenSSH;C:\Prog ram Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%Sy stemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\ System32\WindowsPowerShell\v1.0;%SYSTEMROOT%\Syste m32\OpenSSH
HKU\S-1-5-21-1677839296-4017878107-255514410-1001\Control Panel\Desktop\Wallpaper → c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Pol icies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer => (SmartScreenEnabled: )
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{1F9F9553-9D00-4D0C-9C25-F5DAEE0A55B8}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [TCP Query User{FF56D12A-E51B-43D9-A980-721C2F85287F}C:\program files (x86)\diablo iii\diablo iii.exe] => (Block) C:\program files (x86)\diablo iii\diablo iii.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [{59FE6F7B-A821-4DF9-8268-7EE520D3BD1B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve → Valve Corporation)
FirewallRules: [{DAFABEAC-8330-47EE-B29F-D9EE53B0A31E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve → Valve Corporation)
FirewallRules: [UDP Query User{FAB0F80E-A68D-4974-B785-A0D0921C9241}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [TCP Query User{FC73CBEE-EF3B-4D6F-A59B-9868249DBB90}C:\program files (x86)\diablo iii\x64\diablo iii64.exe] => (Allow) C:\program files (x86)\diablo iii\x64\diablo iii64.exe (Blizzard Entertainment, Inc. → Blizzard Entertainment)
FirewallRules: [{16BBC63C-0CE6-4817-A479-2606AE46E52B}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0\app\DellMo bileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.) [File not signed]
FirewallRules: [{F591C0D0-73D1-4270-90A4-DB4CED5B3576}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobi leConnect_2.0.8168.0_x64__0vhbc3ng4wbp0\app\DellMo bileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. → Screenovate Technologies Ltd.) [File not signed]
FirewallRules: [{5D4B98D6-D9A0-4BED-A5C6-F420C0568A15}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{4B116BA2-2F8B-4848-8757-18F730848910}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{2F0E8491-A09A-44BF-B390-50AF55616296}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{B7449BCD-5E12-433A-A72A-55D58B162F35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{523358B8-6B27-43D5-BD76-40763D0E58B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{B3E5E6EA-1C17-4938-AC03-34727079AEE7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{5F571963-DEE7-4F59-8257-7FCD6EA57435}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{FC097D9B-FB1C-4688-BA95-9D237D84FF73}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation → NVIDIA Corporation)
FirewallRules: [{9D627081-34A5-4DD6-93FA-5C39EE200FE1}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC → Google LLC)
FirewallRules: [{AD4B20C3-E31E-4D1E-89CE-BDD3567C138A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{B0953F01-AE91-408F-943F-CCF7BA45F777}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{7AC579CD-0E07-40D7-813B-303FBFFDE50E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{E21F89BC-5102-4136-A6CB-EB6C91840B98}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{F27779B8-586A-4F0F-99C5-D71FEC4641DD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{89EB20B7-2C44-4BFC-B1B6-AC3929FB1822}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{25D2327F-1B34-49BD-B406-C4FED7A9B3C2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{18B36F39-31C6-41C5-9A3F-E7CA4BF46149}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559 .0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB → Spotify Ltd)
FirewallRules: [{AE3EB668-3C2B-4FBA-8E07-4CB26A3D403A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{72CC28B1-3F14-4D82-BE21-818B6A49F84D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve → Valve Corporation)
FirewallRules: [{169B123B-70B9-4C2D-917A-D648C028D0D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolcen\win_x64\Wolcen .exe (Wolcen Studio) [File not signed]
FirewallRules: [{AD4484F9-70B3-4B94-8709-9D1647C1164A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wolcen\win_x64\Wolcen .exe (Wolcen Studio) [File not signed]
FirewallRules: [{29E85FBF-3DDD-4836-A14B-452062C432F1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook _16051.12430.20264.0_x86__8wekyb3d8bbwe\Office16\O UTLOOK.exe (Microsoft Corporation → Microsoft Corporation)

==================== Restore Points =========================

07-02-2020 22:37:25 Scheduled Checkpoint
13-02-2020 02:15:55 Windows Update
14-02-2020 17:32:40 Installed Steam

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================
[HEADING=1]Application errors:[/HEADING]
Error: (02/18/2020 09:54:47 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (21360,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/17/2020 11:21:24 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (24828,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/17/2020 11:13:17 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (17544,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/17/2020 11:02:11 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3500,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/17/2020 10:39:28 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (25168,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/17/2020 10:34:05 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (22776,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/17/2020 10:23:33 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (26372,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.

Error: (02/17/2020 10:14:44 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7492,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\L ocal\TileDataLayer\Database\EDB.log.
[HEADING=1]System errors:[/HEADING]
Error: (02/17/2020 04:13:40 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/17/2020 04:11:40 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/16/2020 05:41:32 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/16/2020 10:35:23 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/16/2020 10:33:23 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/15/2020 02:35:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The WpnUserService_6829f service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 10000 milliseconds: Restart the service.

Error: (02/15/2020 01:31:09 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MQUKFNH)
Description: The server {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} did not register with DCOM within the required timeout.

Error: (02/14/2020 05:38:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Steam Client Service service failed to start due to the following error:
The service did not respond to the start or control request in a timely fashion.
[HEADING=1]CodeIntegrity:[/HEADING]
Date: 2020-02-18 16:35:20.146
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost. exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-02-18 16:35:20.108
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-18 16:35:20.098
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-18 16:35:20.089
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-18 16:35:20.078
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-18 16:35:20.064
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-18 16:35:20.055
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2020-02-18 16:35:20.045
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

==================== Memory info ===========================

BIOS: Dell Inc. 1.1.3 11/02/2018
Motherboard: Dell Inc. 0H0P0M
Processor: Intel(R) Core™ i7-8700 CPU @ 3.20GHz
Percentage of memory in use: 42%
Total physical RAM: 16187.28 MB
Available physical RAM: 9364.22 MB
Total Virtual: 18619.28 MB
Available Virtual: 9851.52 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:219.56 GB) (Free:103 GB) NTFS
Drive d: (DATA) (Fixed) (Total:1862.89 GB) (Free:1860.4 GB) NTFS
Drive g: () (Removable) (Total:7.48 GB) (Free:7.48 GB) FAT32

\?\Volume{15053041-274d-4c07-92f3-fe27a5708f38}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.53 GB) NTFS
\?\Volume{ed7e443f-2fe5-4367-b81e-987b013811a5}\ (Image) (Fixed) (Total:16.01 GB) (Free:0.13 GB) NTFS
\?\Volume{e5034f44-c6cb-4e90-9978-dcc7fe089dd1}\ (DELLSUPPORT) (Fixed) (Total:1.16 GB) (Free:0.48 GB) NTFS
\?\Volume{803bf31e-8418-4367-8162-8f46e2f42bca}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.57 GB) FAT32

==================== MBR & Partition Table ====================

================================================== ========
Disk: 0 (Size: 1863 GB) (Disk ID: DB53DC21)

Partition: GPT.

================================================== ========
Disk: 1 (Size: 238.5 GB) (Disk ID: DB53DC18)

Partition: GPT.

================================================== ========
Disk: 3 (Size: 7.5 GB) (Disk ID: 8EAB9A2A)
Partition 1: (Not Active) - (Size=7.5 GB) - (Type=0B)

==============
That’s the end. I hope this works this time.

[jmarket]

There is no concern allowing updates to frst, it’s updated very regularly and it is safe. When it updates the new version replaces the old version

Double check you have no Mcafee entries in your add remove programs, if there are any more remove them, and then run this tool.

Mcafee removal tool

Give me a little time to research your logs

[sorcerer]

OK, all done.

[jmarket]

Hello sorcerer

Please left click on the attached Fixlist.txt file at the bottom of this post. On the dialogue box that opens click “Save File” and then “OK”

https://pchelpforum.net/proxy.php?image=http%3A%2F%2Fi.imgur.com%2Fvzol8OV .jpg&hash=60483f868df807006c3eb7113a487891

Select a location then save the file. [COLOR=rgb(184, 49, 47)]IMPORTANT the fixlist.txt file must be in the same location as the FRST program otherwise the fix will not work.

https://pchelpforum.net/proxy.php?image=http%3A%2F%2Fi.imgur.com%2FpjsQ8XB .jpg&hash=3c583e7fbab51c73233ca05c2fb7eaa7

To run the fix right click the FRST icon and choose “Run as Administrator” then click on “Fix”

https://pchelpforum.net/proxy.php?image=http%3A%2F%2Fi.imgur.com%2Fcp0349X .jpg&hash=2da87348afa0449c33228b851f3367cb

Depending on the amount of data to be moved it may take a few minutes to complete, and the computer may reboot. When the fix is complete and/or the computer has rebooted the “Fixlist.txt” file you created will be renamed “Fixlog.txt”

[COLOR=rgb(250, 197, 28)]Please COPY and PASTE the contents of this new file in your next post[COLOR=rgb(250, 197, 28)] [/COLOR][/COLOR][COLOR=rgb(250, 197, 28)][COLOR=rgb(250, 197, 28)][/color][/color][/COLOR]